[dependabot]

Updates the requirements on aws-lc-sys, time and pem to permit the latest version.
Updates aws-lc-sys to 0.45.0

Commits

• 7943223 Prepare aws-lc-sys v0.45.0 (#1220)
• 8ea2229 fix: tighten AEAD, cipher IV, and digest API contracts (#1215)
• bcca4d1 Add ECDSA P-256 SHA-1 ASN.1 verification algorithm (#1214)
• 32338a5 fix(builder): filter the raw-triple CFLAGS spelling for jitterentropy (#1207)
• af422bd Fix -Wa,--debug-prefix-map probe (#1212)
• 749b26f ci: replace removed llvm-devel-lite package in FreeBSD jobs (#1213)
• 36c7a68 fix(publish): verify packaged crate with cargo build, not cargo test (#1201)
• c71ab00 fix: address clippy::assert_is_empty lints in ECB cipher modes (#1210)
• adce1af fix: export cargo:root metadata from the system-library path (#1208)
• 5eceecd Prepare aws-lc-fips-sys v0.14.1 (#1203)
• See full diff in compare view

Updates time to 0.3.55

Release notes

Sourced from time's releases.

v0.3.55

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.55 [2026-08-01]

Fixed

• Avoid underflow in DateIter::nth, ensuring correct behavior.
• Avoid overflow when deserializing timestamps.
• Handle out-of-bounds data when deserializing.
• Don't assume that the format being deserialized was generated by the serializer; this previously led to some valid values being parsed incorrectly and others being rejected.
• No longer silence errors when deserializing UtcOffset.
• OffsetDateTime::from_unix_timestamp_nanos and UtcDateTime::from_unix_timestamp_nanos correctly return None for all out-of-range values, rather than unexpectedly panicking in some situations.
• OffsetDateTime::checked_to_offset and UtcDateTime::checked_to_offset correctly return None for all out-of-range values, rather than unexpectedly panicking in some situations.

0.3.54 [2026-07-20]

Added

• PrimitiveDateTime has been renamed to PlainDateTime.
• Duration has been renamed to SignedDuration.
• Iteration is now possible over Date, Month, and Weekday. Relevant iterator methods have been overridden to ensure maximum performance.

For both PlainDateTime and SignedDuration, a non-deprecated type alias has been added for backwards compatibility. The new names should be preferred.

Changed

• The associated metadata type (for powerfmt implementations) for various types has been changed to () and made public. This guarantees that no additional metadata will be present.

Performance

• More gains when parsing RFC 2822.

0.3.53 [2026-07-01]

There are no publicly-facing changes in this release. It solely works around the cookie crate relying on an implementation detail of time that was never part of the public API (and thus subject to semver guarantees). The internal API has been reverted to the extent necessary for cookie to compile. This measure is temporary; the internal change will be re-applied in an yet-to-be-determined future release.

0.3.52 [2026-06-30]

Fixed

• Subsecond values in the time! macro are parsed using the textual representation, ensuring accuracy. Previously, they were parsed using the floating point representation, which could result

... (truncated)

Commits

• 857d9c4 v0.3.55 release
• 2b72fcd Precise feature gating for macro
• c1089eb Run check-targets, miri in parallel
• f377fad Avoid range-validated ordinal => year in cascade
• 2eacb0a Report miscellaneous tasks, overall status
• 29621ac Speed up CI
• 08de7ba Fix nano-timestamp validation
• 3c3f046 Fix copy-paste error
• 3c0c81c Cascade errors when deserializing UtcOffset
• c21acd5 Handle more deserializations of SignedDuration
• Additional commits viewable in compare view

Updates pem to 4.0.0

Changelog

Sourced from pem's changelog.

3.0.6

• switch from serde to serde_core

3.0.5

• updated base version in the docs

3.0.4

• updated base64 to 0.22.0

3.0.3

• allow general whitespace separators instead of just newlines

3.0.2

• allow EncodeConfig to be built in a const context

3.0.1

• reduce allocations in pem::encode

3.0.0

• trim proptest features to prevent an MSRV break for testing
• make EncodeConfig struct extendable and add a line_wrap config option

2.0.1

• Fix serde support on no_std
• Drop MSRV to 1.60

2.0

• Add no_std support
• Bump MSRV to 1.67
• Refactor API to prevent direct modification and access of elements and to allow access to the optional rfc1421-described headers.

1.1.1

• Allow PEM files to be parsed with the optional rfc1421-described headers (although you cannot retrieve the headers)

1.1.0

• Add optional serde support

1.0.2

• Remove dependency on Regex in favor of a hand-rolled parser

1.0.1

• hide the ASCII_ARMOR symbol to work around a linking issue with 32-bit windows builds

1.0

... (truncated)

Commits

• 99c15c0 chore: Release pem version 4.0.0
• 1733573 Merge pull request #66 from alex/patch-1
• ee57363 raise msrv for testing to 1.71
• a307fde raise msrv to 1.71
• 2b2ad45 upgrade base64 to 0.23
• 4e28c91 Merge pull request #65 from alexanderkjall/upgrade-criterion
• e87f773 upgrade criterion to 0.8
• See full diff in compare view

Updates aws-lc-sys to 0.45.0

Commits

• 7943223 Prepare aws-lc-sys v0.45.0 (#1220)
• 8ea2229 fix: tighten AEAD, cipher IV, and digest API contracts (#1215)
• bcca4d1 Add ECDSA P-256 SHA-1 ASN.1 verification algorithm (#1214)
• 32338a5 fix(builder): filter the raw-triple CFLAGS spelling for jitterentropy (#1207)
• af422bd Fix -Wa,--debug-prefix-map probe (#1212)
• 749b26f ci: replace removed llvm-devel-lite package in FreeBSD jobs (#1213)
• 36c7a68 fix(publish): verify packaged crate with cargo build, not cargo test (#1201)
• c71ab00 fix: address clippy::assert_is_empty lints in ECB cipher modes (#1210)
• adce1af fix: export cargo:root metadata from the system-library path (#1208)
• 5eceecd Prepare aws-lc-fips-sys v0.14.1 (#1203)
• See full diff in compare view

Updates time to 0.3.55

Release notes

Sourced from time's releases.

v0.3.55

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.55 [2026-08-01]

Fixed

• Avoid underflow in DateIter::nth, ensuring correct behavior.
• Avoid overflow when deserializing timestamps.
• Handle out-of-bounds data when deserializing.
• Don't assume that the format being deserialized was generated by the serializer; this previously led to some valid values being parsed incorrectly and others being rejected.
• No longer silence errors when deserializing UtcOffset.
• OffsetDateTime::from_unix_timestamp_nanos and UtcDateTime::from_unix_timestamp_nanos correctly return None for all out-of-range values, rather than unexpectedly panicking in some situations.
• OffsetDateTime::checked_to_offset and UtcDateTime::checked_to_offset correctly return None for all out-of-range values, rather than unexpectedly panicking in some situations.

0.3.54 [2026-07-20]

Added

• PrimitiveDateTime has been renamed to PlainDateTime.
• Duration has been renamed to SignedDuration.
• Iteration is now possible over Date, Month, and Weekday. Relevant iterator methods have been overridden to ensure maximum performance.

For both PlainDateTime and SignedDuration, a non-deprecated type alias has been added for backwards compatibility. The new names should be preferred.

Changed

• The associated metadata type (for powerfmt implementations) for various types has been changed to () and made public. This guarantees that no additional metadata will be present.

Performance

• More gains when parsing RFC 2822.

0.3.53 [2026-07-01]

There are no publicly-facing changes in this release. It solely works around the cookie crate relying on an implementation detail of time that was never part of the public API (and thus subject to semver guarantees). The internal API has been reverted to the extent necessary for cookie to compile. This measure is temporary; the internal change will be re-applied in an yet-to-be-determined future release.

0.3.52 [2026-06-30]

Fixed

• Subsecond values in the time! macro are parsed using the textual representation, ensuring accuracy. Previously, they were parsed using the floating point representation, which could result

... (truncated)

Commits

• 857d9c4 v0.3.55 release
• 2b72fcd Precise feature gating for macro
• c1089eb Run check-targets, miri in parallel
• f377fad Avoid range-validated ordinal => year in cascade
• 2eacb0a Report miscellaneous tasks, overall status
• 29621ac Speed up CI
• 08de7ba Fix nano-timestamp validation
• 3c3f046 Fix copy-paste error
• 3c0c81c Cascade errors when deserializing UtcOffset
• c21acd5 Handle more deserializations of SignedDuration
• Additional commits viewable in compare view

Updates pem to 4.0.0

Changelog

Sourced from pem's changelog.

3.0.6

• switch from serde to serde_core

3.0.5

• updated base version in the docs

3.0.4

• updated base64 to 0.22.0

3.0.3

• allow general whitespace separators instead of just newlines

3.0.2

• allow EncodeConfig to be built in a const context

3.0.1

• reduce allocations in pem::encode

3.0.0

• trim proptest features to prevent an MSRV break for testing
• make EncodeConfig struct extendable and add a line_wrap config option

2.0.1

• Fix serde support on no_std
• Drop MSRV to 1.60

2.0

• Add no_std support
• Bump MSRV to 1.67
• Refactor API to prevent direct modification and access of elements and to allow access to the optional rfc1421-described headers.

1.1.1

• Allow PEM files to be parsed with the optional rfc1421-described headers (although you cannot retrieve the headers)

1.1.0

• Add optional serde support

1.0.2

• Remove dependency on Regex in favor of a hand-rolled parser

1.0.1

• hide the ASCII_ARMOR symbol to work around a linking issue with 32-bit windows builds

1.0

... (truncated)

Commits

• 99c15c0 chore: Release pem version 4.0.0
• 1733573 Merge pull request #66 from alex/patch-1
• ee57363 raise msrv for testing to 1.71
• a307fde raise msrv to 1.71
• 2b2ad45 upgrade base64 to 0.23
• 4e28c91 Merge pull request #65 from alexanderkjall/upgrade-criterion
• e87f773 upgrade criterion to 0.8
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions